Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nlrssf/KWdhQE3ylM43JTXqYBA9lkXOxHY.roa
File: KWdhQE3ylM43JTXqYBA9lkXOxHY.roa (raw, json)
Hash identifier: HXRPO1SqEjCgYwURDoRQ5RkGnx0iHgyKaJKfb/EXbGQ=
Subject key identifier: 29:67:61:40:4D:F2:94:CE:37:25:35:EA:60:10:3D:96:45:CE:C4:76
Certificate issuer: /CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Certificate serial: 079F
Authority key identifier: 71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/KWdhQE3ylM43JTXqYBA9lkXOxHY.roa
Signing time: Thu 12 Sep 2024 23:55:03 +0000
ROA not before: Thu 12 Sep 2024 23:55:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15562
IP address blocks: 194.104.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Sep 2024 03:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1951 (0x79f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d14ebb255dc058d4bfa5a51c93f73f830ab88f
Validity
Not Before: Sep 12 23:55:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=296761404DF294CE372535EA60103D9645CEC476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:73:b7:e8:48:fc:94:d2:9e:a8:7c:a9:1c:
b3:5b:0d:83:80:b1:fd:75:61:e4:ab:fa:57:c7:bc:
00:d8:bd:0a:10:95:1a:13:89:a1:0e:fd:f3:8a:82:
7f:27:c2:7d:27:56:c1:25:f7:51:93:b8:69:50:90:
bd:9d:97:1a:47:99:bf:8f:78:a5:9c:80:46:86:8e:
54:e2:bb:c0:af:76:2f:cf:72:ab:3c:37:8b:93:40:
f4:db:a5:1a:8e:2f:5c:ad:9a:0b:82:b4:78:85:76:
88:15:24:34:ce:57:f5:64:46:18:9a:b0:75:4b:66:
a0:4c:b6:d6:dd:65:09:03:7f:4f:e8:51:87:d4:f4:
25:3c:c2:36:44:06:b5:2c:0f:77:d3:8c:78:17:22:
36:3c:97:c5:ae:ae:8a:09:fd:b7:da:3c:3a:3b:aa:
66:09:04:8d:06:2d:ec:49:dd:33:b3:70:b9:dd:4d:
f9:ab:7f:17:d7:eb:ac:c2:a8:a0:88:14:42:8a:88:
38:62:4a:50:49:31:37:ac:d7:22:21:59:b6:91:7c:
ff:25:7f:96:46:fd:6f:23:d9:3e:53:e6:50:e3:30:
d5:99:8b:64:f8:94:a8:71:26:4f:93:d4:e1:2b:d0:
66:6e:68:bb:10:56:66:10:6a:62:7d:fb:08:e4:1a:
da:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:67:61:40:4D:F2:94:CE:37:25:35:EA:60:10:3D:96:45:CE:C4:76
X509v3 Authority Key Identifier:
keyid:71:D1:4E:BB:25:5D:C0:58:D4:BF:A5:A5:1C:93:F7:3F:83:0A:B8:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/cdFOuyVdwFjUv6WlHJP3P4MKuI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdFOuyVdwFjUv6WlHJP3P4MKuI8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nlrssf/KWdhQE3ylM43JTXqYBA9lkXOxHY.roa
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:d8:e8:8d:1c:3e:29:b6:8b:6e:98:49:4f:2e:a9:e6:a0:9c:
25:e5:ab:44:81:03:c9:0c:96:e6:45:13:41:59:16:a1:2a:49:
17:77:43:f6:42:e6:12:ab:67:83:b3:d9:4f:c9:55:a6:59:0d:
32:e6:c4:1e:16:42:44:50:93:b3:5b:d3:58:2a:01:1a:41:fa:
d9:c3:44:41:2f:7d:55:c0:53:32:a2:97:91:33:f9:b4:eb:c3:
d2:5a:f8:fa:70:e4:a8:52:4e:25:5b:37:e4:d0:a0:d3:0d:c0:
65:63:bd:a6:14:52:f0:f9:15:de:8e:b2:3f:be:df:aa:7d:9b:
ad:5a:0e:25:74:01:b3:ae:7f:2d:c1:85:18:54:4f:78:cb:6d:
b0:dd:25:57:6a:f0:94:ad:3b:e2:6a:df:32:82:8b:23:14:b9:
27:2b:10:1b:e8:63:28:c5:87:d3:e3:fe:05:38:5d:d9:ee:ac:
91:45:a3:d9:b5:b1:68:74:32:e5:40:3c:7e:36:05:f6:f9:a7:
25:ac:00:78:15:1f:fe:d1:59:de:18:9d:12:27:51:c2:b3:1c:
e8:87:c7:54:63:db:6e:1d:c3:3f:43:4d:ec:f5:f8:db:45:b6:
e0:60:60:76:e1:aa:6f:a3:e3:e0:d0:66:7c:b7:35:83:28:4d:
36:91:bc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 07:27:04 2024 by rpki-client on console-fra.rpki-client.org